Waraxe IT Security Portal

OneBigDummy · Regular user

I want to hack a PhpBB board. I think it's a very old board, as the latest copyright date is 2002.

These guys are the ultimate trolls. Heck, that's the whole premise of the board. Then they run back to the board I want to hack and yuck it up.

I tried this thread, but no luck: http://www.waraxe.us/ftopict-1594.html

I'll give you any details you need. I'll will even pay to get the job done right and without detection. Just let me know.

lenny · Valuable expert

Find the version number - the specific version number. You can generally do this by going to the target url folowed by "/docs/CHANGELOG.html" and finding the last entry and work out the current version Smile

Once you have this, come back and we can talk a little more.

OneBigDummy · Regular user

Be gentle with me here, because I know absolutely zilch about hacking/defacing. This is a pure revenge job on my part.

Here is the URL:

http://************.com/phpBB2/

I assume you mean it should say:

http://************.com/phpBB2/docs/CHANGELOG.HTML

When I put that in I get a "404 Not Found" error. Question

EDIT: I see I can't post the link to the site, so I edited it.

lenny · Valuable expert

Hmmm... well revenge hacking dosen't really meet with my moral standings, nor should I really be helping you hack for pure revenge... but I will continue.

Firstly, Waraxe won't like you posting vulnerable URLs, so you better get rid of it (which I doubt).

Firstly, the community is a large one. Large communities generally will take care to protect themselves, and the admin obviously has some sense otherwise the Docs directory would still be there.

I found this:

OneBigDummy · Regular user

When I used the link I put in my original post (http://www.waraxe.us/ftopict-1594.html), I could get to step seven before the page I was trying to hack just kept refreshing itself. Although it wasn't in the instructions, I'd have to hit the "Replay" button before I could edit.

I edited the URL out of the other post. If you read some of the posts on that board, however, you'll see that they are pretty deserving of whatever comes to them.

OneBigDummy · Regular user

I apologize for the double post, but I found it!!!

2.0.5

lenny · Valuable expert

Brilliant! Now set about finding exploits Twisted Evil

OneBigDummy · Regular user

Would I have to use exploits specifically for 2.0.5? I did a search and only found one link with "2.0.5" in the title. Confused

If I can use others, would I use earlier or later versions?

lenny · Valuable expert

Try and find exploits specific for 2.0.5... however some exploits from a few builds beforehand may also work. Just try Googling "phpbb 2.0.5 exploits" and do some research Smile

OneBigDummy · Regular user

I read the documentation for the 2.0.5 exploits, but honestly it's all jibberish to me. I really don't understand it. Sorry for being such a pain, but I'm going to keep trying, even if it takes me months with this little topic. Please be patient.